CVE-2019-4530: Medium severity ibm maximo asset management vulnerability
IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they should not normally be able to. IBM X-Force ID: 165586.
Other sources
IBM Maximo Asset Management could allow an authenticated user to delete a record that they should not normally be able to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4530?
CVE-2019-4530 has a medium severity level as it allows authenticated users to delete unauthorized records.
How do I fix CVE-2019-4530?
To mitigate CVE-2019-4530, update IBM Maximo Asset Management to version 7.6.1.2 or later.
Who is affected by CVE-2019-4530?
CVE-2019-4530 affects users of IBM Maximo Asset Management versions 7.6, 7.6.1, and 7.6.1.1.
What types of records can be deleted due to CVE-2019-4530?
CVE-2019-4530 allows the deletion of records that should normally be restricted from deletion by authenticated users.
Is authentication required to exploit CVE-2019-4530?
Yes, exploitation of CVE-2019-4530 requires authenticated access to the IBM Maximo Asset Management platform.